Nostr Web Client

Replying to

Hanshan

And nobody's talking about taking your signing device to a hacking convention

come on man

"someone could theoretically gain access" is hand waving

We're talking about a random person having a dedicated phone in their home under their personal control

And *maybe* they turn it on occasionally to sign a transaction

You have not indicated ANY practical way to compromise such a device

Just "insecure because scary reasons"

I can agree that maybe this isn't advice that you want the general newbie to hear

But you're not indicating any actual problems with the advice itself

Ty-Fi 1y ago

Security is about removing as many vulnerabilities as possible. So just because you can’t find a person testifying about their hacked device doesn’t mean it isn’t something to be avoided. Especially when it costs far less to buy a hww than a smartphone anyways.

BTC security needs to be easy and clear cut. What you’re advocating for is not. Many of us will never see it as a good idea for people to treat a smartphone as cold storage. But it’s your money.

I’m a little lost with what is your argument at this point. That you’re right and everyone else is wrong?

HWW security is better than smartphones. Smartphones aren’t cold storage by definition. Not sure how I can make it any clearer for you.

Reply to this note

Please Login to reply.

Discussion

Hanshan 1y ago

I literally said it in the 1st post you replied to

and what Im saying is EXTREME clear-cut.

so far all youve said is

"hww more secure against theoretical attacks nobody has ever heard of"

which is true.

just saying for your average pleb it doesnt matter.

nostr:nevent1qvzqqqqqqypzp7v96vy3jlyqtct3n3e3sk6hflp7usra0sdkz477axwx4n39nxamqywhwumn8ghj7mn0wd68ytnzd96xxmmfdejhytnnda3kjctv9uq3vamnwvaz7tmwdaehgu3w0pkhytnjda3kkue0qqsx5sgktydqcwzraev8s64qwe2zhw635rhj6d3ryuk7gmrcyqjusqsssgh0z

Ty-Fi 1y ago

Very short sided man. Security matters for everyone.

The founder of Trezor started HWW’s because his coin was hacked. You apparently think people using graphene is an equal recommendation to a hardware wallet and you’re wrong. Sorry, I know it’s not fun to hear 🤷🏻‍♂️

These attacks aren’t theoretical. Cybersec professionals are building tools to stop very real possibilities to help people like you secure generational wealth and you’re dismissing their work as unnecessary.

I love graphene devices as much as anyone. But they are designed for general purpose privacy. Not long term savings. No computers are designed for such a purpose, which is why the hww industry now exists.

Maybe the real problem here is using the term cold storage. It means something specific and you’re using it to describe a suitable setup for yourself, but it’s not the same. It’s certainly not easy to use cold storage for the average person.

Nothing wrong with using hot wallets. I use them too. But “cold storage” should never be a smartphone-diy recommendation.

I think this is as clearly as I can make my point. So I’m moving on with my Saturday, good luck man.

Hanshan 1y ago

Im fine if we dont call it "cold storage". i dont particularly care if we call it that or not.

ill also close by pointing out you have not indicated any security vulnerabilities in my suggestion.

although i agree with your point its more vulnerable to 1 in a million type attacks that average plebs are extremely unlikely to be targets for.

Ty-Fi 1y ago

https://letmegooglethat.com/?q=Pixel+graphene+cve+vulnerability+history

Graphene is best around. But nobody is invincible.

Hanshan 1y ago

agreed 👍